Zusy.452027 (B) information

The Zusy.452027 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.452027 (B) virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.452027 (B)?


File Info:
name: 447E110D1DC3AD4EC502.mlw
path: /opt/CAPEv2/storage/binaries/a23d2a16d3b2bf8c8d666809296ab900b0917454d9f820b52324def524b26533
crc32: 94FE1FF8
md5: 447e110d1dc3ad4ec5026d5ade92af42
sha1: dda25fe3059d9de974f06a8f62dcd3d6f8e26ee5
sha256: a23d2a16d3b2bf8c8d666809296ab900b0917454d9f820b52324def524b26533
sha512: 037771e44f8f0a1d1e6427b2367b1ac8909ce246850751ac10b964a59fd7866722a582a469c57720501455afcbebb6f0318f3781adb609b717bdb3a4029d7fbe
ssdeep: 1536:4BeCo+YpTwRWOU3gFKm0XrATW9Q6IVnQHU02suPgPc3ZnjsWjcdZ61TsCNqByfMW:mesyyyJJMnQ0hg0JMZ61TZqRe7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T196F35A1073958030D0B64534266A8722573EBD719BED8E9BB7C41E9D8EB42C1BB31BB3
sha3_384: aba107be2dbbe1376d37cbca4a0132377f4b55130cf0e95e94e542cf3edc28d837deb8e957c805a71564dd73f82d084b
ep_bytes: e8d41e0000ff7508e813220000833d3c
timestamp: 2014-10-14 09:22:49

Version Info:
0: [No Data]

Zusy.452027 (B) also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.452027
ClamAV	Win.Malware.Urelas-6717394-0
McAfee	Artemis!447E110D1DC3
Cylance	unsafe
Sangfor	Virus.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Trojan.Urelas.b
Cyren	W32/Urelas.DK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.452027
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.Urelas.16000161
Emsisoft	Gen:Variant.Zusy.452027 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Zusy.452027
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.447e110d1dc3ad4e
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.452027
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan[Downloader]/Win32.Urelas.ab
Arcabit	Trojan.Zusy.D6E5BB
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.36250.kCZ@aG35BDg
ALYac	Gen:Variant.Zusy.452027
MAX	malware (ai score=88)
Malwarebytes	Urelas.Trojan.Downloader.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH0CF623
Rising	Trojan.Urelas!1.BE13 (CLASSIC)
Ikarus	Trojan.Win32.Urelas
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.49CA!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Zusy.452027 (B)?

Zusy.452027 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X